$ rpki-client -vvf rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft File: mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft (raw, json) Hash identifier: Rtuo05/utB+5EIbO05+It0k8crOnWsQdwMOW4QMjQKE= Subject key identifier: E3:E7:CD:CF:96:AD:9A:48:08:EE:1A:AC:E3:93:D5:F3:CB:2B:FE:95 Authority key identifier: 9A:D4:C8:05:32:8C:ED:CF:51:90:34:04:89:64:74:D6:DE:48:67:48 Certificate issuer: /CN=A919E68B/serialNumber=9AD4C805328CEDCF51903404896474D6DE486748 Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft Manifest number: 65 Signing time: Wed 05 Nov 2025 07:12:25 +0000 Manifest this update: Wed 05 Nov 2025 07:12:25 +0000 Manifest next update: Wed 12 Nov 2025 07:12:25 +0000 Files and hashes: 1: mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl (hash: eaPgrOYtRteFV0cdk5fhAcnBxAM/pGaukHGkVirhgBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:12:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E68B, serialNumber=9AD4C805328CEDCF51903404896474D6DE486748 Validity Not Before: Nov 5 07:12:25 2025 GMT Not After : Nov 12 07:12:25 2025 GMT Subject: CN=690af8d9-15e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:64:e3:ca:e8:2f:e9:df:33:77:d0:ae:0a:f6: 1f:9a:e1:7e:de:1e:a0:3d:a3:39:d5:0f:2a:2b:a2: 12:7f:7c:3d:46:56:66:54:27:2e:56:a2:75:5b:4a: ed:4e:d6:f2:41:3b:3c:02:ea:c2:00:e1:65:4e:8e: ef:91:90:4e:50:2c:27:e7:35:a1:84:48:77:6e:96: 25:08:d9:ae:7f:9c:f0:13:c7:ed:5e:6d:6a:22:28: 66:5d:84:a8:2a:f5:34:78:19:12:f7:7e:a5:32:28: dc:ee:d0:7c:be:a1:6b:0f:fa:b6:a3:2e:26:c9:0b: 12:a3:f5:1c:03:8f:62:ad:d3:70:b0:5b:dc:03:4d: 05:4c:6b:6d:00:98:61:84:8c:d5:81:44:28:c1:a3: b1:b8:2f:f9:c5:74:c3:34:16:25:31:4b:4b:77:5d: 06:ac:14:07:53:ac:0e:d5:40:b5:57:15:52:e5:7f: b0:91:f0:f2:a3:6c:98:92:a5:06:9c:c3:68:18:10: c4:92:b5:b4:ef:95:1b:b6:0f:c5:a0:a6:fb:15:f9: 19:00:78:58:ad:58:30:ca:b4:55:a1:02:e9:a8:35: 82:6c:fd:02:cb:8c:7b:2c:61:3c:b5:c1:87:81:51: ae:ae:89:35:ec:d4:fc:d7:cb:64:ff:c9:09:e6:33: c2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E7:CD:CF:96:AD:9A:48:08:EE:1A:AC:E3:93:D5:F3:CB:2B:FE:95 X509v3 Authority Key Identifier: keyid:9A:D4:C8:05:32:8C:ED:CF:51:90:34:04:89:64:74:D6:DE:48:67:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:90:a9:c0:c5:58:3f:80:71:6b:27:18:59:0c:26:a7:77:da: 85:8d:eb:eb:82:05:df:bc:5e:54:72:18:68:df:8f:91:03:2b: 21:95:6a:54:b7:95:4b:5f:4d:ea:5c:3f:3e:7f:31:35:9e:60: b0:98:5d:90:c2:75:46:f5:e4:7c:4c:55:c9:e6:ee:38:e1:61: 97:24:91:8f:90:40:88:06:97:8b:2d:6f:66:1c:d4:99:d5:9c: 7e:60:9b:2e:6a:91:0d:4a:63:14:f2:4a:4e:b5:2b:9b:fd:35: 22:41:a9:61:76:9a:3b:c8:5b:76:43:cc:a5:a1:8d:b3:d4:a5: 58:23:e3:c1:f5:b9:56:87:a0:9b:59:fe:61:bb:69:c6:b6:67: 6d:67:8c:b7:cb:3c:09:a3:24:74:aa:97:5c:84:64:5f:99:c6: 69:27:45:b4:69:17:a4:3e:75:06:88:70:1e:75:72:30:4b:b2: 2f:6b:6e:1e:7f:96:a4:35:33:bc:07:c3:cf:56:38:2c:55:99: d4:10:ba:4c:9d:4d:e3:89:3f:a0:7e:f9:05:bb:a9:9c:93:e1: 20:7c:02:cb:21:ea:d8:cd:da:2b:ad:90:97:6a:ba:ff:00:24: f1:86:a9:37:e4:a5:a2:e2:4b:c6:eb:5e:db:53:63:9b:3f:ad: cf:74:50:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RTY4QjExMC8GA1UEBRMoOUFENEM4MDUzMjhDRURDRjUxOTAzNDA0ODk2NDc0RDZE RTQ4Njc0ODAeFw0yNTExMDUwNzEyMjVaFw0yNTExMTIwNzEyMjVaMBgxFjAUBgNV BAMTDTY5MGFmOGQ5LTE1ZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJZOPK6C/p3zN30K4K9h+a4X7eHqA9oznVDyorohJ/fD1GVmZUJy5WonVbSu1O 1vJBOzwC6sIA4WVOju+RkE5QLCfnNaGESHduliUI2a5/nPATx+1ebWoiKGZdhKgq 9TR4GRL3fqUyKNzu0Hy+oWsP+rajLibJCxKj9RwDj2Kt03CwW9wDTQVMa20AmGGE jNWBRCjBo7G4L/nFdMM0FiUxS0t3XQasFAdTrA7VQLVXFVLlf7CR8PKjbJiSpQac w2gYEMSStbTvlRu2D8WgpvsV+RkAeFitWDDKtFWhAumoNYJs/QLLjHssYTy1wYeB Ua6uiTXs1PzXy2T/yQnmM8IHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4+fNz5at mkgI7hqs45PV88sr/pUwHwYDVR0jBBgwFoAUmtTIBTKM7c9RkDQEiWR01t5IZ0gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFNjhCLzE2QTkwQzQ0MUNG MDExRjA4OENGNzE4MkM0RjlBRTAyL210VElCVEtNN2M5UmtEUUVpV1IwMXQ1SVow Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbXRUSUJUS003YzlSa0RRRWlXUjAxdDVJWjBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlF NjhCLzE2QTkwQzQ0MUNGMDExRjA4OENGNzE4MkM0RjlBRTAyL210VElCVEtNN2M5 UmtEUUVpV1IwMXQ1SVowZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEaQqcDFWD+AcWsnGFkMJqd32oWN6+uCBd+8XlRyGGjfj5EDKyGValS3 lUtfTepcPz5/MTWeYLCYXZDCdUb15HxMVcnm7jjhYZckkY+QQIgGl4stb2Yc1JnV nH5gmy5qkQ1KYxTySk61K5v9NSJBqWF2mjvIW3ZDzKWhjbPUpVgj48H1uVaHoJtZ /mG7aca2Z21njLfLPAmjJHSql1yEZF+ZxmknRbRpF6Q+dQaIcB51cjBLsi9rbh5/ lqQ1M7wHw89WOCxVmdQQukydTeOJP6B++QW7qZyT4SB8Assh6tjN2iutkJdquv8A JPGGqTfkpaLiS8brXttTY5s/rc90UHA= -----END CERTIFICATE-----Generated at Thu Nov 6 06:14:46 2025 by rpki-client